ApkCombiner: combining multiple Android apps to support inter-app analysis

Li Li, Alexandre Bartel, Tegawendé F. Bissyandé, Jacques Klein, Yves Le Traon

Research output: Chapter in Book/Report/Conference proceedingConference PaperResearch

50 Citations (Scopus)

Abstract

Android apps are made of components which can leak information between one another using the ICC mechanism. With the growing momentum of Android, a number of research contributions have led to tools for the intra-app analysis of Android apps. Unfortunately, these state-of-the-art approaches, and the associated tools, have long left out the security flaws that arise across the boundaries of single apps, in the interaction between several apps. In this paper, we present a tool called ApkCombiner which aims at reducing an inter-app communication problem to an intra-app inter-component communication problem. In practice, ApkCombiner combines different apps into a single apk on which existing tools can indirectly perform inter-app analysis. We have evaluated ApkCombiner on a dataset of 3,000 real-world Android apps, to demonstrate its capability to support static context-aware inter-app analysis scenarios.

Original languageEnglish
Title of host publicationICT Systems Security and Privacy Protection
Subtitle of host publication30th IFIP TC 11 International Conference, SEC 2015 Hamburg, Germany, May 26–28, 2015 Proceedings
EditorsHannes Federrath, Dieter Gollmann
Place of PublicationCham Switzerland
PublisherSpringer
Pages513-527
Number of pages15
ISBN (Electronic)9783319184678
ISBN (Print)9783319184661
DOIs
Publication statusPublished - 2015
Externally publishedYes
EventIFIP TC-11 SEC International Information Security and Privacy Conference 2015 - Hamburg, Germany
Duration: 26 May 201528 May 2015
Conference number: 30th
https://www.ifipsec.org/2015/

Publication series

NameIFIP Advances in Information and Communication Technology
PublisherSpringer
Number455
ISSN (Print)1868-4238
ISSN (Electronic)1868-422X

Conference

ConferenceIFIP TC-11 SEC International Information Security and Privacy Conference 2015
Abbreviated titleSEC 2015
CountryGermany
CityHamburg
Period26/05/1528/05/15
Internet address

Cite this